Extracted

• • Target

    46a607b6b078561ce860eb97bed73eb675489a0e2737ae81face8f5fea14b6ba

  • Size

    533KB

  • MD5

    38ced4b8464e2da0988aa2c6a354859e

  • SHA1

    487859db5f406a41ac2822144ccb7d1e6f65f30a

  • SHA256

    46a607b6b078561ce860eb97bed73eb675489a0e2737ae81face8f5fea14b6ba

  • SHA512

    222f3f341402c82c256a63332c9f48f585bedca8479c6df595f675b3e25e36c0135f50b2e19659b56ad5e1c542e45a31caaa512d4f449ea61e42b813f771f0e1

  • SSDEEP

    12288:ZMroy90T66hZZBuSFasN02OU04hCGJ4/4Q9IR:JyJmZUSHbU4YGC/47

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1